-
A recently released exploit package lets the third-generation Amazon Fire TV Cube gain an unlocked bootloader and persistent root access on firmware version PS7717 or earlier. Developed by XDA developer Pro-me3us, the project targets devices codenamed …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Progress has disclosed 31 vulnerabilities in MarkLogic Server that could lead to privilege escalation, server-side code execution, authentication bypass, credential exposure, and data compromise. In its security bulletin dated October 12, 2026, the com…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A Kimsuky campaign that delivers Funhouse ransomware through a malicious Hangul document disguised as a resume. The operation combines embedded OLE objects, sequential scripts, a Python backdoor, and Quasar RAT, linking the September 2026 activity to e…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
SonicWall released security updates to address four vulnerabilities in its SMA 1000 series appliances, including a critical server-side request forgery (SSRF) flaw rated 10.0. These vulnerabilities could allow unauthorized operations, operating system …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
MariaDB maintainers have disclosed ten vulnerabilities affecting database server components, Linux packaging, and Connector/C. Under specific conditions, these flaws could lead to remote code execution, privilege escalation, unauthorized table access, …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A sophisticated campaign in which threat actors posed as a Web3 venture-capital accelerator to target cryptocurrency start-ups, developers and founders with free Claude and Gemini credits, AI coding tools and smart-contract security audits. It claimed …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Ubuntu and Canonical’s websites experienced a sustained DDoS attack, disrupting access to public websites and security information services for four hours and 12 minutes. The issue has since been resolved. Notably, Ubuntu repositories, installati…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A newly reported macOS implant tracked as GhostProfile clones browser profiles and remotely operates concealed copies of Chrome or Firefox, allowing attackers to browse using victims’ authenticated sessions. The researchers described it as a hidden-VNC…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
North Korea-linked cyber espionage group Kimsuky has expanded its Operation GitPower campaign by using fake Zoom installers and malicious Windows shortcut files to target Ukrainian experts working in diplomacy, security, and international policy. Resea…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
GitLab has released emergency security updates to address a critical vulnerability that could allow unauthenticated attackers to execute arbitrary code on affected servers. This vulnerability, tracked as CVE-2026-97229, has been assigned the highest CV…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
